     (ingest/reindex-collection-permitted-groups (tc/echo-system-token))
     (index/wait-until-indexed)
 
-    (is (d/refs-match? [c1-echo c1-dif c1-dif10 c1-iso]
-                       (search/find-refs :collection {:token guest-token})))))
+    (d/assert-refs-match [c1-echo c1-dif c1-dif10 c1-iso]
+                         (search/find-refs :collection {:token guest-token}))))
 
 (deftest collection-search-with-acls-test
   (let [group1-concept-id (e/get-or-create-group (s/context) "group1")

(ns cmr.system-int-test.search.acls.collection
  "Tests searching for collections with ACLs in place."
  (:require
   [cmr.common-app.test.side-api :as side]
   [clojure.test :refer :all]
   [clojure.string :as str]
   [cmr.acl.acl-fetcher :as acl-fetcher]
   [cmr.common.services.messages :as msg]
   [cmr.common.util :refer [are2] :as util]
   [cmr.mock-echo.client.echo-util :as e]
   [cmr.system-int-test.data2.atom :as da]
   [cmr.system-int-test.data2.collection :as dc]

    (index/wait-until-indexed)

    ;;;;system token sees everything
    (d/assert-refs-match [c1-echo c1-dif c1-dif10 c1-iso c1-smap]
                         (search/find-refs :collection {:token (tc/echo-system-token)}))
    ;;guest user sees nothing
    (d/assert-refs-match [] (search/find-refs :collection {:token guest-token}))))

(deftest collection-search-with-restriction-flag-acls-test
  (let [guest-token (e/login-guest (s/context))
